Mailing-List: contact cygwin-help AT sourceware DOT cygnus DOT com; run by ezmlm
List-Subscribe: <mailto:cygwin-subscribe AT sources DOT redhat DOT com>
List-Archive: <http://sources.redhat.com/ml/cygwin/>
List-Post: <mailto:cygwin AT sources DOT redhat DOT com>
List-Help: <mailto:cygwin-help AT sources DOT redhat DOT com>, <http://sources.redhat.com/ml/#faqs>
Sender: cygwin-owner AT sources DOT redhat DOT com
Delivered-To: mailing list cygwin AT sources DOT redhat DOT com
Importance: Normal
Subject: Re: LSASS.EXE taking a good share of CPU time on Win2k
To: cygwin AT sources DOT redhat DOT com
X-Mailer: Lotus Notes Release 5.0.3 (Intl) 21 March 2000
Message-ID: <OF42620AC2.C200E4FE-ON8525697B.005C7AD5@raleigh.ibm.com>
From: "Ed Bradford/Raleigh/IBM" <egb AT us DOT ibm DOT com>
Date: Tue, 17 Oct 2000 12:55:55 -0400
X-MIMETrack: Serialize by Router on D04NMS90/04/M/IBM(Release 5.0.3 (Intl)|21 March 2000) at
 10/17/2000 12:55:55 PM
MIME-Version: 1.0
Content-type: text/plain; charset=iso-8859-1
Content-Transfer-Encoding: 8bit
X-MIME-Autoconverted: from quoted-printable to 8bit by delorie.com id NAA06321

The following is from Mark Russinovich's and David Solomon's book "Inside
Microsoft Windows 2000, Third Edition" (Microsoft Press). This book is
excellent and I highly recommend it.

     Local security authority subsystem (Lsass) A user-mode process running
     the image \Winnt\System32\Lsass.exe that is responsible for the local
     system security policy (such as which users are allowed to log on to
     the machine, password policies, privileges granted to users and
     groups, and the system security auditing settings), user
     authentication, and sending security audit messages to the Event Log.
     The local security authority service (Lsasrv?
     \Winnt\System32\Lsasrv.dll), a library that Lsass loads, implements
     most of this functionality.
     Lsass policy database A database that contains the local system
     security policy settings. This database is stored in the registry
     under HKLM\SECURITY. It includes such information as what domains are
     entrusted to authenticate logon attempts, who has permission to access
     the system and how (interactive, network, and service logons), who is
     assigned which privileges, and what kind of security auditing is to be
     performed. The Lsass policy database also stores "secrets" that
     include logon information used for cached domain logons and Win32
     service user-account logons. (See Chapter 5 for more information on
     Win32 services.)

Ed

Your Windows 2000 Arborist
T/L 589-4410; Outside: 1-919-993-4410
egb AT us DOT ibm DOT com


--
Want to unsubscribe from this list?
Send a message to cygwin-unsubscribe AT sourceware DOT cygnus DOT com